Improper Isolation of Shared Resources in Network On Chip (NoC)

Opis

The Network On Chip (NoC) does not isolate or incorrectly isolates its on-chip-fabric and internal resources such that they are shared between trusted and untrusted agents, creating timing channels.

Typically, network on chips (NoC) have many internal resources that are shared between packets from different trust domains. These resources include internal buffers, crossbars and switches, individual ports, and channels. The sharing of resources causes contention and introduces interference between differently trusted domains, which poses a security threat via a timing channel, allowing attackers to infer data that belongs to a trusted agent. This may also result in introducing network interference, resulting in degraded throughput and latency.

Skutki

• Confidentiality, Availability

  DoS: Resource Consumption (Other); Varies by Context; Other

  Attackers may infer data that belongs to a trusted agent. The methods used to perform this attack may result in noticeably increased resource consumption.

Zapobieganie

• Architecture and Design, Implementation

  Implement priority-based arbitration inside the NoC and have dedicated buffers or virtual channels for routing secret data from trusted agents.

Przykłady podatności

• CVE-2021-33096 Improper isolation of shared resource in a network-on-chip leads to denial of service

Słabość nadrzędna

• CWE-653 Improper Isolation or Compartmentalization
• CWE-668 Exposure of Resource to Wrong Sphere

Pokrewna

• CWE-1189 Improper Isolation of Shared Resources on System-on-a-Chip (SoC)

Kiedy powstaje

• Architecture and Design
• Implementation

Dotyczy

Not Language-Specific, Not OS-Specific, Not Architecture-Specific, Security Hardware, Not Technology-Specific

Źródła

1. SurfNoC: A Low Latency and Provably Non-Interfering Approach to Secure Networks-On-Chip — Hassan M. G. Wassel, Ying Gao, Jason K. Oberg, Tedd Huffmire, Ryan Kastner, Frederic T. Chong, Timothy Sherwood, 2013
2. Network on a chip — Wikipedia
3. A Survey of Network-on-Chip Security Attacks and Countermeasures — Subodha Charles, Prabhat Mishra, ACM Computing Surveys, 2021
4. Design of Secure and Trustworthy Network-on-chip Architectures — Subodha Charles, 2020